From owner-FreeBSD-net-jp@jp.freebsd.org  Tue Jul 13 11:35:59 1999
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id LAA95046;
	Tue, 13 Jul 1999 11:35:59 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from itg-inet-01.tv-asahi.co.jp (itg-inet-01.tv-asahi.co.jp [158.207.31.41])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id LAA95041
	for <net-jp@jp.FreeBSD.org>; Tue, 13 Jul 1999 11:35:58 +0900 (JST)
	(envelope-from c3po@snow.tv-asahi.co.jp)
Received: by itg-inet-01.tv-asahi.co.jp (8.9.1a/3.7W99031015) id LAA08329; Tue, 13 Jul 1999 11:35:53 +0900 (JST)
Received: by itg-inet-11.tv-asahi.co.jp (8.9.1a/3.7W99031416) id LAA25977; Tue, 13 Jul 1999 11:35:57 +0900 (JST)
Received: (from c3po@localhost)
	by mikan.snow.tv-asahi.co.jp (SMI-8.6/3.6Wmikan980312) id LAA25474
	for net-jp@jp.FreeBSD.org; Tue, 13 Jul 1999 11:35:54 +0900
Date: Tue, 13 Jul 1999 11:35:54 +0900
From: C3PO <c3po@snow.tv-asahi.co.jp>
Message-Id: <199907130235.LAA25474@mikan.snow.tv-asahi.co.jp>
To: net-jp@jp.FreeBSD.org
Bc: suzu
Content-Type: text
X-Sun-Charset: ja_JP.iso2022-7
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+990625
X-Sequence: FreeBSD-net-jp 1715
Subject: [FreeBSD-net-jp 1715] Re: ftp for ipfw
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org
X-Originator: c3po@snow.tv-asahi.co.jp

FreeBSD$B$N(Jipfw$B$G!"(Jftp$B$rDL$9@_Dj$NOCBj$G$9!#(J
FreeBSD-users-jp$B$+$i0\$C$FMh$^$7$?!#(J

$B;d(J> 1. allow tcp from any to any established
$B;d(J> 2. allow tcp from PC1 to PC2 21 setup
$B;d(J> 4. allow tcp from PC1 to PC2 1024-65535 setup

MIHIRA>  4 $B$NBe$j$K(J
MIHIRA>  allow tcp from PC1 20 to PC2 1024-65535 setup
MIHIRA>                     ~~ 20 $B$rDI2C(J
MIHIRA> $B$H$$$&(J rule $B$G$O$@$a$G$9$+(J?($B<j85$G3NG'$7$F$J$$$N$G$4$a$s$J$5$$(J^^;)

$BB?J,(JMIHIRA$B$5$s$N0U?^$O!"%5!<%P$+$i$N%G!<%?%;%C%7%g%s$NLa$j$r!"(J
20$BHV%]!<%H$H;XDj$9$l$P!"$h$j%;%-%e%j%F%#$,A}$9!"(J
$B$H$$$&$3$H$@$H;!$7$^$9!#(J

$B$?$@!"La$j$O!"(J
1. allow tcp from any to any established
$B$G4{$K;XDj$7$F$$$k!"$H$$$&$3$H$H!"(J
man ipfw$B$G$O!"(J
ipfw [-q] add [number] action [log] proto from src to dst [via name | ipno] [options]
$B$H$J$C$F$$$k$N$G!"(J
src$B$N<!$K(Jipno$B$r=q$/J}K!$O$"$j$^$;$s!#(J
$B<B:]$K@_Dj$9$k$H!"%3%^%s%I>e$N%(%i!<$O=P$J$$$h$&$G$9$,!"(J
setup$B$G:G=i$N%Q%1%C%H$r;XDj$7$F$*$-$J$,$i!"(J
$B99$KLa$j%]!<%H$r;XDj$9$k$H$$$&$N$O!"(J
ipfw$B$N5!G=$H$7$F$OL5M}$,$"$k$N$8$c$J$$$+$J$H;W$$$^$9!#(J

$B;d$N$H$3$m$O%^%7%s$,<BF/$KF~$C$F$7$^$C$?$N$G!"(J
$B$3$N%3%^%s%I$N8z2L$,<B83$G$-$J$/$F$9$_$^$;$s!#(J

				c3po@snow.tv-asahi.co.jp	$BNkLZ$R$m$7(J

